tags.thesun.co.uk

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:02:39:19:d4:6c:d9:69:83:25:24:ef:64:5c:ca:af was issued on by Amazon.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tags.thesun.co.uk

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:02:39:19:d4:6c:d9:69:83:25:24:ef:64:5c:ca:af
Serial Number (int): 15962278686929943902453795524687219375
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 10:bb:5e:56:11:78:9a:47:2a:0d:c7:5d:68:63:ea:a5:78:33:ee:22
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 45:dc:78:0e:7a:a2:c8:d0:61:58:7c:10:3a:d6:89:02:67:26:b3:7e
Fingerprint (sha256): 33:6a:c3:ef:ba:f8:33:48:a2:2a:f5:79:61:4e:b3:8c:d6:3e:f0:c0:ca:f4:75:55:59:70:86:5f:33:fe:41:a9

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate tags.thesun.co.uk

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tags.thesun.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tags.thesun.co.uk
tags.driving.co.uk
tags.talksport.com
tags.virginradio.co.uk
tags.club950.co.uk
tags.thetimes.co.uk
tags.talkradio.co.uk
tags.thescottishsun.co.uk
tags.mytimesplus.co.uk
tags.thesun.ie
tags.ukholidaysinthesun.co.uk
tags.dreamteamfc.com
tags.the-sun.com
tags.the-tls.co.uk

Other certificates including the domain name thesun.co.uk

(limited to 100 certificates)
www2.pugpig.com
dns-vetting1-jeffg-noah.map.fastly.net
digital-newspaper.thesun.co.uk
iframe.thesun.co.uk
ir.tags.newscgp.com
pixelappcollector.thesun.co.uk
feeds.thesun.co.uk
superdays.thesun.co.uk
uc17.janrainengage.com
promos.thesun.co.uk
superdays.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
www2.pugpig.com
superdays.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
acs.newsint.co.uk
uc18.janrainengage.com
join.thesun.co.uk
digital-newspaper.thesun.co.uk
acs.newsint.co.uk
hvrhgt.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
promos.thesun.co.uk
www2.pugpig.com
www2.pugpig.com
directory.thesun.co.uk
superdays.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
www2.pugpig.com
freepress.thesun.co.uk
www2.pugpig.com
promos.thesun.co.uk
racingpredictor.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
pac.thesun.co.uk
dartspredictor.thesun.co.uk
travelcomp.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
favourite.thesun.co.uk
cdn259.talksport.com
travelcompthanks.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
iframe.thesun.co.uk
www2.pugpig.com
favourite.thesun.co.uk
uc18.janrainengage.com
superdays.thesun.co.uk
www2.pugpig.com
www2.pugpig.com
savers-beta.thesun.co.uk
uc18.janrainengage.com
superdays.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
freepress.thesun.co.uk
digital-newspaper.thesun.co.uk
link.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
uc17.janrainengage.com
dns-vetting1-jeffg-noah.map.fastly.net
acs.newsint.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
www2.pugpig.com
dns-vetting1-jeffg-noah.map.fastly.net
europeanpredictor.thesun.co.uk
savers-beta.thesun.co.uk
superdays.thesun.co.uk
www2.pugpig.com
jobs.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
www2.pugpig.com
jobs.thesun.co.uk
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
comps.thesun.co.uk
cricketpredictor.thesun.co.uk
promos.thesun.co.uk
acs.newsint.co.uk
news-www.thesun.co.uk
www2.pugpig.com
account.thesun.co.uk
www2.pugpig.com
www2.pugpig.com
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
uc17.janrainengage.com
www2.pugpig.com
dns-vetting1-jeffg-noah.map.fastly.net
directory.thesun.co.uk
superdays.thesun.co.uk
www2.pugpig.com
www2.pugpig.com
dns-vetting1-jeffg-noah.map.fastly.net
travelcompthanks.thesun.co.uk

Certificate

The complete raw certificate details for tags.thesun.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAZYjWurXLvpqjQb65Rz
ilIE8zfXUUUzdCtRKOrlO5PWp+okh4W62aAHq7ASJ3qTaZa1/GhtYU+FFSkwbqXX
HbU1PYLEoqLq6p7/GoxnVeLHYhNvIT5gKe/0+msXN534P6doyyOd6gNAsqXJg6IK
f8yIOq8abJ6tr88Ffq7E8AwRnRLIWkENQjSn4+AL0dgqybkWhGYXV1jvMcJYhEFA
WaOBIqp74v+SpV4CPOKObOvgQGFFKCmFey8AoGDzDvRmkmhA0/hyFN3undll8ZOh
TGTxCcZGQWp04CWZDQjswRimnM188PA+I9sf/rnQY0iGdP1pGjB4hotP4IIwN16t
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15962278686929943902453795524687219375
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tags.thesun.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22726024177709426442127813052256465231039280890941841483156298702211586565050731974309805090277531007145113425117559237717713337409124023055021749059761575694859159893839523389197962863849504347781697610850251299723211084625772766952204978665320399793321354264937892653811691097902699229554210101747187217244636860596910101634856373903498241559020403579772155995262730597929106873129881435351454245658328249668256601197218878432088003189463864050177223901592597512823483049368033424200293219357020664430336226980040402646396426552100357457150263555465543865859910941931224484551754328891638234803497496632921744649643
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10bb5e5611789a472a0dc75d6863eaa57833ee22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (308 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tags.thesun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tags.driving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tags.talksport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tags.virginradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tags.club950.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tags.thetimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tags.talkradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tags.thescottishsun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tags.mytimesplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tags.thesun.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tags.ukholidaysinthesun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tags.dreamteamfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tags.the-sun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tags.the-tls.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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